unicorn-studio
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were found. The skill contains documentation and a standalone demo for a legitimate animation service.
- [EXTERNAL_DOWNLOADS]: The documentation references the Unicorn Studio SDK distributed via jsDelivr. This is a standard and neutral practice for loading versioned client-side libraries from a well-known public CDN.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for loading remote scene data using the
data-us-project-srcattribute. This is the primary intended function of the skill to fetch animation data and does not pose an execution risk to the agent environment.
Audit Metadata